<div dir="ltr"><font face="monospace">Thank you for that. So if in my ldap.properties file, can I do something like this to distinguish the difference between the different configurations? I don't think I can because I believe there is another file in authn that calls LDAP.ldapURL. </font><div><br><div>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">idp.authn.ADLDAP.ldapURL</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span>= </span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures">ldaps://ActiveDirectoryServer:636</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures"><span class="gmail-s1" style="color:rgb(46,174,187)">idp.authn.LDAP.ldapURL</span><span class="gmail-s2" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span>= </span><span class="gmail-s3">ldaps://OpenLdapServer:636</span><br></span></p>
<p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(64,11,217)"><br></p><p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo"><font color="#000000">For active directory I need this line:</font></p><p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(64,11,217)">
</p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">idp.authn.LDAP.userFilter</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> <span class="gmail-Apple-converted-space"> </span>= </span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">(sAMAccountName={user})</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)"><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures"><font color="#000000">And LDAP I need:</font></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">
</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">idp.authn.LDAP.userFilter</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures"> <span class="gmail-Apple-converted-space"> </span>= </span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">(uid={user})</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)"><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span style="font-variant-ligatures:no-common-ligatures">I'd like to add these additional properties but I don't know how to reference them since they have the same name. In my testing so far, I've removed all my openldap configuration specific configs and replaced with the ActiveDirectory configs. I have the connection to AD working now but I want to make it to follow standards. So it will be easier to ask for help when needed.</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span style="font-variant-ligatures:no-common-ligatures"><br></span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(0,0,0)"><span style="font-variant-ligatures:no-common-ligatures">Thank you.</span></p><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><p><span style="font-family:Arial,sans-serif;color:rgb(31,73,125)"><font size="1">Steve Herrera<br></font></span><span style="font-family:Arial,sans-serif;color:rgb(31,73,125)"><font size="1">System Administration<br>Information Security<br></font></span><span style="color:rgb(31,73,125);font-family:Arial,sans-serif;font-size:7.5pt">Bradley University<br></span><span style="color:rgb(31,73,125);font-family:Arial,sans-serif;font-size:7.5pt">Phone: 309 / 677-2336<br></span><span style="color:rgb(31,73,125);font-family:Arial,sans-serif;font-size:7.5pt">FAX: 309 / 677-3460<br></span><span style="font-size:7.5pt;font-family:Arial,sans-serif;color:rgb(31,73,125)">Email: </span><u><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:blue"><a href="mailto:sherrera@fsmail.bradley.edu" target="_blank">sherrera@fsmail.bradley.edu</a></span></u></p></div></div></div></div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Mar 26, 2021 at 2:41 PM Nate Klingenstein <<a href="mailto:ndk@signet.id">ndk@signet.id</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Steve,<br>
<br>
You need to define an additional DataConnector in attribute-resolver.xml no matter what. You can choose to define additional properties in ldap.properties and refer to them from the new DataConnector much like the distributed one, or you can hardcode the values into attribute-resolver.xml itself.<br>
<br>
Keeping them separate is a matter of managing the dependencies of attributes, e.g. InputDataConnectors.<br>
<br>
Take care,<br>
Nate.<br>
<br>
--------<br>
Signet, Inc.<br>
The Art of Access ®<br>
<br>
<a href="https://www.signet.id" rel="noreferrer" target="_blank">https://www.signet.id</a><br>
<br>
-----Original message-----<br>
From: Steve Herrera via users<br>
Sent: Friday, March 26 2021, 12:52 pm<br>
To: Shib Users<br>
Cc: Steve Herrera<br>
Subject: active directory data connection<br>
<br>
We are running IDP 4.0.1 on ubuntu 18.04. We have it hooked into our openldap server to pull attributes from. We now have a need to have it pull a few attributes from our Active Directory.<br>
<br>
My question is, how do I configure shibboleth to be able to pull from both directories? I have my openldap configured in ldap.properties. Do I also need to add my active directory settings in there as well? If so, how do I set it up to keep the ldap separate from AD? Or for my AD connection, would I just need to add the Data connector section in attribute-resolver.xml and leave ldap.properties as is?<br>
<br>
Thank you<br>
<br>
Steve Herrera<br>
System Administration<br>
Information Security<br>
Bradley University<br>
Phone: 309 / 677-2336<br>
FAX: 309 / 677-3460<br>
Email: <a href="mailto:sherrera@fsmail.bradley.edu" target="_blank">sherrera@fsmail.bradley.edu</a> <mailto:<a href="mailto:sherrera@fsmail.bradley.edu" target="_blank">sherrera@fsmail.bradley.edu</a>><br>
<br>
--<br>
<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
<br>
<br>
</blockquote></div>